OID reference

tmnxIPsecTransformPfsDhGroup

1.3.6.1.4.1.6527.3.1.2.48.2.1.6

Description

The value of tmnxIPsecTransformPfsDhGroup specifies the Diffie-hellman (DH) key exchange to be used each time the Security Association (SA) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange ca…

Full description and source information

Identification

Identifier and names

Parent
1.3.6.1.4.1.6527.3.1.2.48.2.1 (tmnxIPsecTransformEntry)
Node code
6
Node name
tmnxIPsecTransformPfsDhGroup
Category
SNMP management object
Numeric OID
1.3.6.1.4.1.6527.3.1.2.48.2.1.6
URN notation
urn:oid:1.3.6.1.4.1.6527.3.1.2.48.2.1.6
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 3 6 1 4 1 6527 3 1 2 48 2 1 6}

  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tmnxIPsecTransformTable(2) tmnxIPsecTransformEntry(1) tmnxIPsecTransformPfsDhGroup(6)}
OID-IRI notation
  • /1/3/6/1/4/1/6527/3/1/2/48/2/1/6
  • /ISO/Identified-Organization/6/1/4/1/6527/3/1/2/48/2/1/6
  • /ISO/3/6/1/4/1/6527/3/1/2/48/2/1/6
Named path variants
  • /iso/identified-organization/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/identified-organization/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/identified-organization/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/org/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/org/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/org/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/org/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-identified-organization/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-identified-organization/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-identified-organization/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-identified-organization/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-organization/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-organization/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-organization/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup
  • /iso/iso-organization/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tmnxIPsecTransformTable/tmnxIPsecTransformEntry/tmnxIPsecTransformPfsDhGroup

SNMP properties

Value type
TmnxIPsecTransformPfsDhGrp
Maximum access defined by MIB
read-create
Status in MIB
current
Default value
inherit

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

The displayed source records contain one distinct definition. Compare its source records.

tmnxIPsecTransformPfsDhGroup     OBJECT-TYPE
    SYNTAX      TmnxIPsecTransformPfsDhGrp
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
        "The value of tmnxIPsecTransformPfsDhGroup specifies the Diffie-hellman
         (DH) key exchange to be used each time the Security Association (SA)
         key is renegotiated. After the SA expires, the key is forgotten and
         another key is generated (if the SA remains up). This means that an
         attacker who cracks part of the exchange can only read the part that
         used the key before the key changed. There is no advantage of cracking
         the other parts if the attacker has already cracked one.

         The value of 'inherit (-1)' specifies that the IPsec tunnel or gateway
         which refers to this IPsec transform will reuse the DH group
         configurations from its associated IKE policy table
         (tmnxIkePolicyTable). Specifically, if the value of
         tmnxIkePolicyPFSEnabled is 'true (1)', the IPsec transform will use
         the value of tmnxIkePolicyPFSDHGroup. If the value of
         tmnxIkePolicyPFSEnabled is 'false (2)', the IPsec transform doesn't
         use any DH group."
    DEFVAL      { inherit }
    ::= { tmnxIPsecTransformEntry 6 }

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

The value of tmnxIPsecTransformPfsDhGroup specifies the Diffie-hellman (DH) key exchange to be used each time the Security Association (SA) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one. The value of 'inherit (-1)' specifies that the IPsec tunnel or gateway which refers to this IPsec transform will reuse the DH group configurations from its associated IKE policy table (tmnxIkePolicyTable). Specifically, if the value of tmnxIkePolicyPFSEnabled is 'true (1)', the IPsec transform will use the value of tmnxIkePolicyPFSDHGroup. If the value of tmnxIkePolicyPFSEnabled is 'false (2)', the IPsec transform doesn't use any DH group.

Sources for this description

Nokia networking MIB copies (LibreNMS/Observium Community)

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Nokia networking MIB copies (LibreNMS/Observium Community)1 record · 1 source

Description 1

tmnxIPsecTransformPfsDhGroup · currentNokia networking MIB copies (LibreNMS/Observium Community)1 source

Status in source: current.

Names: tmnxIPsecTransformPfsDhGroup

Technical details
{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "tmnxIPsecTransformPfsDhGroup",
    "OBJECT-TYPE",
    "SYNTAX",
    "TmnxIPsecTransformPfsDhGrp",
    "MAX-ACCESS",
    "read-create",
    "STATUS",
    "current",
    "DESCRIPTION",
    "\"The value of tmnxIPsecTransformPfsDhGroup specifies the Diffie-hellman (DH) key exchange to be used each time the Security Association (SA) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one. The value of 'inherit (-1)' specifies that the IPsec tunnel or gateway which refers to this IPsec transform will reuse the DH group configurations from its associated IKE policy table (tmnxIkePolicyTable). Specifically, if the value of tmnxIkePolicyPFSEnabled is 'true (1)', the IPsec transform will use the value of tmnxIkePolicyPFSDHGroup. If the value of tmnxIkePolicyPFSEnabled is 'false (2)', the IPsec transform doesn't use any DH group.\"",
    "DEFVAL",
    "{",
    "inherit",
    "}",
    "::=",
    "{",
    "tmnxIPsecTransformEntry",
    "6",
    "}"
  ],
  "syntax_tree": [
    [
      "row",
      "TmnxIPsecTransformPfsDhGrp"
    ],
    null,
    [
      "MaxAccessPart",
      "read-create"
    ],
    [
      "Status",
      "current"
    ],
    [
      "DESCRIPTION",
      "The value of tmnxIPsecTransformPfsDhGroup specifies the Diffie-hellman (DH) key exchange to be used each time the Security Association (SA) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one. The value of 'inherit (-1)' specifies that the IPsec tunnel or gateway which refers to this IPsec transform will reuse the DH group configurations from its associated IKE policy table (tmnxIkePolicyTable). Specifically, if the value of tmnxIkePolicyPFSEnabled is 'true (1)', the IPsec transform will use the value of tmnxIkePolicyPFSDHGroup. If the value of tmnxIkePolicyPFSEnabled is 'false (2)', the IPsec transform doesn't use any DH group."
    ],
    null,
    null,
    null,
    [
      "DEFVAL",
      "inherit"
    ]
  ]
}
  • Nokia networking MIB copies (LibreNMS/Observium Community) · Publisher's source file: Source package: observium-community-latest.tar.gz

    Vendor MIB copy from the Observium Community archive. Nokia support.

    Module: TIMETRA-IPSEC-MIB

    See published definition above

    Module imports
    {'IF-MIB': ['InterfaceIndex'], 'HCNUM-TC': ['CounterBasedGauge64'], 'SNMPv2-TC': ['DateAndTime', 'DisplayString', 'RowStatus', 'StorageType', 'TEXTUAL-CONVENTION', 'TimeStamp', 'TruthValue'], 'SNMPv2-SMI': ['Counter32', 'Counter64', 'Gauge32', 'Integer32', 'MODULE-IDENTITY', 'NOTIFICATION-TYPE', 'OBJECT-TYPE', 'Unsigned32'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'NOTIFICATION-GROUP', 'OBJECT-GROUP'], 'TIMETRA-TC-MIB': ['TEntryId', 'TItemDescription', 'TItemLongDescription', 'TLNamedItemOrEmpty', 'TNamedItem', 'TNamedItemOrEmpty', 'TTcpUdpPort', 'TmnxAdminState', 'TmnxAuthAlgorithm', 'TmnxBfdSessOperState', 'TmnxEnabledDisabled', 'TmnxEncrAlgorithm', 'TmnxIPsecDirection', 'TmnxIPsecKeyingType', 'TmnxIPsecTunnelTemplateId', 'TmnxIPsecTunnelTemplateIdOrZero', 'TmnxIkePolicyAuthMethod', 'TmnxIkePolicyAutoEapMethod', 'TmnxIkePolicyAutoEapOwnMethod', 'TmnxIkePolicyDHGroupOrZero', 'TmnxIkePolicyOwnAuthMethod', 'TmnxOperState', 'TmnxServId', 'TmnxTunnelGroupIdOrZero', 'TmnxVRtrID', 'TmnxVRtrIDOrZero'], 'TIMETRA-SAP-MIB': ['sapEncapValue', 'sapPortId'], 'INET-ADDRESS-MIB': ['InetAddress', 'InetAddressPrefixLength', 'InetAddressType', 'InetPortNumber'], 'TIMETRA-SERV-MIB': ['svcId'], 'TIMETRA-VRTR-MIB': ['vRtrID', 'vRtrIfIndex'], 'TIMETRA-FILTER-MIB': ['TFilterID'], 'TIMETRA-GLOBAL-MIB': ['timetraSRMIBModules', 'tmnxSRConfs', 'tmnxSRNotifyPrefix', 'tmnxSRObjs'], 'TIMETRA-CHASSIS-MIB': ['TmnxEsaIdOrZero', 'TmnxEsaVmIdOrZero', 'TmnxHwIndexOrZero', 'tmnxCardSlotNum', 'tmnxChassisIndex', 'tmnxEsaId', 'tmnxEsaVmId', 'tmnxIPsecIsaGrpId', 'tmnxMDASlotNum']}
    · Download TIMETRA-IPSEC-MIB

    Related source files and packages:

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.6527)

Marcelo Mourier

Current Registration Authority (inferred from ancestor 1.3.6.1.4.1.6527)

Jason Sterne

Siblings (6)

OIDNameDirect childrenDescendantsDescription
1.3.6.1.4.1.6527.3.1.2.48.2.1.1 tmnxIPsecTransformId00
1.3.6.1.4.1.6527.3.1.2.48.2.1.2 tmnxIPsecTransformRowStatus00
1.3.6.1.4.1.6527.3.1.2.48.2.1.3 tmnxIPsecTransformLastChanged00
1.3.6.1.4.1.6527.3.1.2.48.2.1.4 tmnxIPsecTransformAuthAlgorithm00
1.3.6.1.4.1.6527.3.1.2.48.2.1.5 tmnxIPsecTransformEncrAlgorithm00
1.3.6.1.4.1.6527.3.1.2.48.2.1.7 tmnxIPsecTransformLifeTime00